CVE

Id
7642  
CVE No.
CVE-2003-0818  
Status
Candidate  
Description
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.  
Phase
Modified (20061101)  
Votes
ACCEPT(4) Armstrong, Baker, Cole, Wall | NOOP(2) Christey, Cox  
Comments
Christey> Various sources say that Windows Server 2003 is also affected. | | XF:win-asn1-library-bo(15039) | URL:http://xforce.iss.net/xforce/xfdb/15039 | BID:9633 | URL:http://www.securityfocus.com/bid/9633 | EEYE:AD20040210-2 | URL:http://www.eeye.com/html/Research/Advisories/AD20040210-2.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
45102 7642 CVE-2003-0818 BUGTRAQ:20040210 EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption  View
45103 7642 CVE-2003-0818 URL:http://marc.info/?l=bugtraq&m=107643836125615&w=2  View
45104 7642 CVE-2003-0818 NTBUGTRAQ:20040210 EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption  View
45105 7642 CVE-2003-0818 URL:http://marc.info/?l=ntbugtraq&m=107650972617367&w=2  View
45106 7642 CVE-2003-0818 BUGTRAQ:20040210 EEYE: Microsoft ASN.1 Library Bit String Heap Corruption  View
45107 7642 CVE-2003-0818 URL:http://marc.info/?l=bugtraq&m=107643892224825&w=2  View
45108 7642 CVE-2003-0818 NTBUGTRAQ:20040210 EEYE: Microsoft ASN.1 Library Bit String Heap Corruption  View
45109 7642 CVE-2003-0818 URL:http://marc.info/?l=ntbugtraq&m=107650972723080&w=2  View
45110 7642 CVE-2003-0818 MS:MS04-007  View
45111 7642 CVE-2003-0818 URL:http://www.microsoft.com/technet/security/bulletin/MS04-007.asp  View
45112 7642 CVE-2003-0818 CERT:TA04-041A  View
45113 7642 CVE-2003-0818 URL:http://www.us-cert.gov/cas/techalerts/TA04-041A.html  View
45114 7642 CVE-2003-0818 CERT-VN:VU#216324  View
45115 7642 CVE-2003-0818 URL:http://www.kb.cert.org/vuls/id/216324  View
45116 7642 CVE-2003-0818 CERT-VN:VU#583108  View
45117 7642 CVE-2003-0818 URL:http://www.kb.cert.org/vuls/id/583108  View
45118 7642 CVE-2003-0818 OVAL:oval:org.mitre.oval:def:653  View
45119 7642 CVE-2003-0818 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:653  View
45120 7642 CVE-2003-0818 OVAL:oval:org.mitre.oval:def:796  View
45121 7642 CVE-2003-0818 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:796  View
45122 7642 CVE-2003-0818 OVAL:oval:org.mitre.oval:def:797  View
45123 7642 CVE-2003-0818 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:797  View
45124 7642 CVE-2003-0818 OVAL:oval:org.mitre.oval:def:799  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62667 JVNDB-2004-000008 Microsoft ISA Server の H.323 フィルタにおける脆弱性 (H.323 の実装に脆弱性) Microsoft Internet Security and Acceleration (ISA) Server 2000 SP1 以前における H.323 フィルタに不備が存在するため、特定の H.323 トラフィックの処理によりバッファオーバーフローが発生する脆弱性が存在します。 CVE-2003-0819 7642 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000008.html  View